A New Software Supply‑Chain Attack Targeted Millions With Spyware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers today disclosed a new supply chain attack targeting online gamers by compromising the update mechanism of NoxPlayer, a free Android emulator for PCs and Macs. Dubbed “Operation NightScout” by Slovak cybersecurity firm ESET, the highly-targeted surveillance campaign involved …

LIVE Webinar: Major Lessons to be Learned from Top Cyber Attacks in 2020

Blog WriterThe Hacker News - Original news source is thehackernews.com

We likely all agree that 2020 was a year we won’t soon forget – for many reasons. One area particularly impacted last year was (and continues to be) cybersecurity.  While Internet access allowed many businesses to continue functioning during the …

New Cryptojacking Malware Targeting Apache, Oracle, Redis Servers

Blog WriterThe Hacker News - Original news source is thehackernews.com

A financially-motivated threat actor notorious for its cryptojacking attacks has leveraged a revised version of their malware to target cloud infrastructures using vulnerabilities in web server technologies, according to new research. Deployed by the China-based cybercrime group Rocke, the Pro-Ocean cryptojacking …

Google Discloses Severe Bug in Libgcrypt Encryption Library—Impacting Many Projects

Blog WriterThe Hacker News - Original news source is thehackernews.com

A “severe” vulnerability in GNU Privacy Guard (GnuPG)’s Libgcrypt encryption software could have allowed an attacker to write arbitrary data to the target machine, potentially leading to remote code execution. The flaw, which affects version 1.9.0 of libgcrypt, was discovered on …

Google uncovers new iOS security feature Apple quietly added after zero-day attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google Project Zero on Thursday disclosed details of a new security mechanism that Apple quietly added to iOS 14 as a countermeasure to prevent attacks that were recently found to leverage zero-days in its messaging app. Dubbed “BlastDoor,” the improved …

Italy CERT Warns of a New Credential Stealing Android Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed a new family of Android malware that abuses accessibility services in the device to hijack user credentials and record audio and video. Dubbed “Oscorp” by Italy’s CERT-AGID and spotted by AddressIntel, the malware “induce(s) the user to install …

Hezbollah Hacker Group Targeted Telecoms, Hosting, ISPs Worldwide

Blog WriterThe Hacker News - Original news source is thehackernews.com

A “persistent attacker group” with alleged ties to Hezbollah has retooled its malware arsenal with a new version of a remote access Trojan (RAT) to break into companies worldwide and extract valuable information. In a new report published by the ClearSky research …

New CISOs Survey Reveals How Small Cybersecurity Teams Can Confront 2021

Blog WriterThe Hacker News - Original news source is thehackernews.com

The pressure on small to medium-sized enterprises to protect their organizations against cyberthreats is astronomical. These businesses face the same threats as the largest enterprises, experience the same (relative) damages and consequences when breaches occur as the largest enterprises but …

Authorities Seize Dark-Web Site Linked to the Netwalker Ransomware

Blog WriterThe Hacker News - Original news source is thehackernews.com

U.S. and Bulgarian authorities this week took control of the dark web site used by the NetWalker ransomware cybercrime group to publish data stolen from its victims. “We are striking back against the growing threat of ransomware by not only …

European Authorities Disrupt Emotet — World’s Most Dangerous Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Law enforcement agencies from as many as eight countries dismantled the infrastructure of Emotet, a notorious email-based Windows malware behind several botnet-driven spam campaigns and ransomware attacks over the past decade. The coordinated takedown of the botnet on Tuesday — …